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WHAT IS CLAIMED IS: 

1. A method for managing a resource by an mbean server application having an mbean, the 
method comprising: 

receiving a request by the mbean server application, wherein the request comprises an action 
5 a user seeks to perform on the resource; 

adding a number of instance identifier fields to an mbean descriptor file associated with the 
mbean; 

populating the number of instance identifier fields with an equivalent number of properties 
from an objectname of the resource, thereby producing a populated mbean descriptor file that 
1 0 identifies the resource among resources; 

reading the populated mbean descriptor file; and 

determining, based on the reading, whether the user has an authority to perform the request. 

2. The method of claim 1, further comprising creating the objectname for the resource before 
1 5 implementing the method. 

3. The method of claim 1, further comprises copying the mbean descriptor file before the 
adding. 

20 4. The method of claim 1, further comprising identifying the number of instance identifier 
fields necessary for distinguishing a type of the resource from all other resources having the 
type. 

5. The method of claim 1, further comprising invoking an mbean method for performing the 
25 request after the determining indicates the user has the authority for performing the request. 

6. The method of claim 5, further comprising filtering results obtained by the invoking, 
wherein the filtering comprises: 

determining the authority associated with the results for the user; and 
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returning the results for which the user has the authority. 

7. The method of claim 1, wherein the mbean comprises a type identical to the type of the 
resource. 

5 
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8. A system for managing a resource by an mbean server application having an mbean, the 
system comprising: 

an input module for receiving a request from a user in order to perform an action on a 
resource; 

5 an addition module for adding a number of instance identifier fields to an mbean descriptor 

file associated with the mbean; 

a population module for populating the number of instance identifier fields with an 
equivalent number of properties from an objectname of the resource, thereby producing a 
populated mbean descriptor file that identifies the resource among resources; 
10 a reader module for reading the populated mbean descriptor file; and 

a decision module for determining whether the user has an authority for performance of the 
action on the resource. 

9. The system of claim 8, further comprising a creation module for creating the objectname for 
1 5 the resource before implementing the method. 

10. The system of claim 8, further comprising a copy module for copying the mbean descriptor 
file before processing by the adder module. 

20 11. The system of claim 8, further comprising an identification module for identifying the 
number of instance identifier fields necessary for distinguishing a type of the resource from all 
other resources having the type. 

12. The system of claim 8, further comprising an invocation module for invoking an mbean 
25 method for performing the request after processing by the decision module indicates the user has 

the authority for performance of the request. 

13. The system of claim 12, further comprising a filter module for filtering results obtained by 
the invocation module, wherein the filter module comprises: 
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a determination module for determining the authority associated with the results for the user; 

and 

a return module for returning the results for which the user has the authority. 

5 14. The system of claim 8, wherein the mbean comprises a type identical to the type of the 
resource. 
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15. A machine-accessible medium containing instructions, which when executed by a machine, 
cause the machine to perform operations for managing a resource by an mbean server 
application having an mbean, comprising: 

receiving a request by the mbean server application, wherein the request comprises an action 
5 a user seeks to perform on the resource; 

adding a number of instance identifier fields to an mbean descriptor file associated with the 
mbean; 

populating the number of instance identifier fields with an equivalent number of properties 
from an objectname of the resource, thereby producing a populated mbean descriptor file that 
1 0 identifies the resource among resources; 

reading the mbean descriptor file after the populating; and 

determining, based on the performed operations for reading, whether the user has an 
authority to perform the request. 

15 16. The machine-accessible medium of claim 20, further comprising instructions to perform 
operations for creating the objectname for the resource before implementing the method. 

17. The machine-accessible medium of claim 20, further comprising instructions to perform 
operations for copying the mbean descriptor file before the adding. 

20 

18. The machine-accessible medium of claim 20, further comprising instructions to perform 
operations for identifying the number of instance identifier fields necessary for distinguishing a 
type of the resource from all other resources having the type. 

25 19. The machine-accessible medium of claim 20, further comprising instructions to perform 
operations for invoking an mbean method for performing the request after the performed 
operations for determining indicates the user has the authority for performing the request. 
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20. The machine-accessible medium of claim 20, further comprising instructions to perform 
operations for filtering results obtained by the performed operations for invoking, the 
instructions to perform operations for filtering comprising: 

determining the authority associated with the results for the user; and 
5 returning the results for which the user has the authority. 



